There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

...

USN-4295-1: Rake vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands. CVEs contained in this USN include: CVE-2020-8130. Affected Cloud...

USN-4295-1 rake vulnerability

It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands...

Ruby Rake OS Command Injection Vulnerability

Rake is a software task management and formation automation tool. An operating system command injection vulnerability exists in Ruby Rake versions prior to Rake 12.3.3:: FileList. The vulnerability arises from a network system or product not properly filtering special characters, commands, etc...